Overview

overview

3

Static

static

3

CryptMP La...L].rar

windows10-2004-x64

3

CryptMP La...L].rar

windows11-21h2-x64

3

CryptMP La...ls.dll

windows10-2004-x64

1

CryptMP La...ls.dll

windows11-21h2-x64

1

CryptMP La...pf.dll

windows10-2004-x64

1

CryptMP La...pf.dll

windows11-21h2-x64

1

CryptMP La...ct.dll

windows10-2004-x64

1

CryptMP La...ct.dll

windows11-21h2-x64

1

CryptMP La...s.json

windows10-2004-x64

3

CryptMP La...s.json

windows11-21h2-x64

3

CryptMP La...yp.exe

windows10-2004-x64

1

CryptMP La...yp.exe

windows11-21h2-x64

1

CryptMP La...config

windows10-2004-x64

3

CryptMP La...config

windows11-21h2-x64

3

CryptMP La...yp.exe

windows10-2004-x64

1

CryptMP La...yp.exe

windows11-21h2-x64

1

CryptMP La...g.json

windows10-2004-x64

3

CryptMP La...g.json

windows11-21h2-x64

3

Analysis

  • max time kernel
    136s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-08-2024 09:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    CryptMP Launcher [STARFALL DLL]/cryp.exe

  • Size

    155KB

  • MD5

    28afd27abba4d0cb0ef290a26bed83ec

  • SHA1

    2563efc98ff46a8d0e7eb9223c9ab9959768b763

  • SHA256

    0fdbdfbcd94cf0c4eed3720dff5b2fe8e6b0ce2a4ebdfb2686ab168c2a25d4c9

  • SHA512

    5afc856f057b29b5d8a2f9812ea850f7cbaae70a6d02e3592e59644de3b783def6c312f13cd88ac6606e4bfc00bd67d003a1d816cee3bd487b7259e3a2f0e118

  • SSDEEP

    3072:C8vbzyQ6Y1YXrbNK+3FNxacPEMk6rRQACTWLfEpZQz:CszAXNK+3FVHRQ9TWLfGQ

Score
1/10

Malware Config

Signatures

  • Modifies Control Panel 1 IoCs
    evasion

Processes

  • C:\Users\Admin\AppData\Local\Temp\CryptMP Launcher [STARFALL DLL]\cryp.exe
    "C:\Users\Admin\AppData\Local\Temp\CryptMP Launcher [STARFALL DLL]\cryp.exe"
    1⤵
    • Modifies Control Panel
    PID:2240
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=1296,i,1602949858158667699,12464335823361976127,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:8
    1⤵
      PID:1088

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2240-0-0x00007FFBBD3AB000-0x00007FFBBD3AC000-memory.dmp

      Filesize

      4KB

      Download

    • memory/2240-1-0x00007FFBBD3AB000-0x00007FFBBD3AC000-memory.dmp

      Filesize

      4KB

      Download